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WHAT WE CLAIM IS: 



1 \\ A method of sampling mtemet protocol traffic over links of an internet 

2 protocol network comprising the steps of 

3 sampling packets at network traffic points as a function of an internet 

4 protocol packet content, and 

5 generating a packet label f&r each sampled packet. 

12. A method as recited in claini 1 wherein said function of an internet 

2 protocol packet content is dependent\upon substantially invariant data of said 

3 packet. 

1 3. A method as recitejKtn claim 2 wherein ^paid invariant data of said packet 

2 includes at least high entropy data fields 

\ \ 

1 4. A method as recited in cla\m 2 wherein said invarianlxlata excludes at 

2 least variable fields. 

1 5. A method as recited in claim 3 wherein said invariant data further excludes 

2 at least one of a service type field, a header checksum, a version field, and a 

3 header length field. 

1 6. A method as recited in claim 2 wherein &id invariant data further includes 

2 a low entropy data field. 

1 7. A method as recited in claim 1 wherein said packet label has a length 

2 determined to be as small as possible consistent witm avoiding a collision with a 

3 similarly labeled packet during the expected period a\sampled packet takes to 

4 traverse the network. 

1 8. A method as recited in claim 1 wherein said applied packet label 

2 comprises between 16 and 24 bits. 
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1 9. A method as recited in claim 1 wherein a sampling interval for a given 

2 period is determined by the upper bound of a sampled packet's expected lifetime. 

1 10. A method as recited inj^tejm 1 further comprising the step of transmitting 

2 said generated label to a m^a^u^iT^nt system. 



1 11. A method as recites in claim 10 further comprising the step of multiplying 

2 the number of packet samples and the number of bits per sampled packet at a 

3 measurement system. 

1 >2. Circuit apparatus for sampling internet protocol traffic over links of an 

2 internet protocol network for use in sampling traffic at network traffic points 

3 comprising 

4 a processor for computing a sampling function, responsive to the sampling 

5 function, for determining packets to be sampled, and for generating a label for 

6 each sampled packet. 



1 13. Apparatus as repited in claim 12 furthei comprising a packet buffer for 

2 temporarily holding packets during sampling; 

1 14. Apparatus as recited in claim 12 providing an oujput to a measurement 

2 system of labels for only sampled packets. 

1 15. Apparatus as recited in^iainrtlwherein said sampling function of an 

2 internet protocol packet content is dependent upon substantially invariant data of 

3 said packet. 



1 16. Apparatus as recited in claim 15 wharein said invariant data of said packet 

2 includes an invariant data field. 



39 



IDS No.: 2000-0065 



1 17. Apparatus as reciteifl in claim 15 wherein said invariant data excludes a 

2 variable data field. 



1 8. Apparatus as recited 
excludes at least one of a 
and a header length fiel 



1 19. Apparatus as recited m clai 

2 includes a low entropy data field 




15 wherein said invariant data further 
field, a header checksum, a version field, 



in said invariant data further 



20. Apparatus as recited in claim 12 wherein said packet label has a length 
determined to be as small as possible to\avoid collisions with packets having a 
similar label within the expected period \ sampled packet takes to traverse the 
network. 



1 21. Apparatus as recited in claim 12 wherein said applied packet label 

2 comprises between 16 and 24 bits\ 



1 22. Apparatus as recited in claim\12, said processor for determining a 

2 sampling interval by the upper boundV>f a sampled packet's expected lifetime. 



1 23. Apparatus as recited in claim 12 furt 

2 transmitting a plurality of labels and data to 

3 packet. . 




prising a data transmitter for 
ent system as an IP 



1 24. Apparatus as recited in claim \2 said processor for multiplying the number 

2 of packet samples and the number of bits per sampled packet. 

1 N ^£ % Apparatus for sampling swftc^jed |>acketjraffic over links of a packet 

2 switching network for use in samplingVnJffic at network traffic points comprising 

3 an input buffer for temporarily^ujring inptfming data packets during 

4 sampling and 
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5 a sampling subsystem for determining which packets to sample and 

6 generating labels for each sampled packet. 

1 26. Apparatus as recited inWaim 25 wherein a sampling function and a 

2 labeling function operate in parallel. 

1 27. Apparatus as recited in claim 25 for use at an ingress router, the apparatus 

2 further comprising a data transmitter for transmitting said generated label and 

3 packet parameters to a measurement system. 

1 28. Apparatus as repifed in claim 27 wherein said packet parameters comprise 

2 a source address, a/destination addresaand a/length. 



1 29. Apparatus as recited m ctmm 25 Vbr use at intermediate^and egress routers, 

2 the apparatus further comprising a data transmitter fortpiigmitting said generated 

3 label to a measurement system\ X^**** 0 * 0 ^ 

1 30. Apparatus as recited in claim 29 wherein said data transmitter further 

2 transmits a time stamp to said measurementlsystem. 

1 31. Apparatus as recited in claim 25 further comprising a packet constructer 

2 for constructing probe packets comprising prepetermined invariant data. 

1 N 3^. A method of sampling switched packet rraffic over links of a packet 

2 switching network for use in sampling traffic at network traffic points comprising 

3 selecting packets for sampling in accordance with a predetermine sampling 

4 function at an edge router, \ 

5 altering a predetermined bit position of a packet that is at least practically 

6 invariant as a sampling flag to demark a packet selected for sampling. 

1 33. A method as recited in claim 32 wherein saidialtered bit comprises a bit of 

2 a protocol version field. \ 
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1 ^--34^ A method of generating 

2 determining a hashing fun^i 

3 selected for sampling so 

4 with another similarly labeled p] 

5 expected period of life of said p; 




a packet comprising the step of 
;enerajfe a practically unique label for a packet 
Jcet for sampling will not collide 

cted packet rate within an 
for sampling. 



